General
- Target 2026-10-22_fd664dde4d7f73ec0a0a8515f4bc5b3a_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_swisyn_vidar
- Size 4.5MB
- Sample261023-aha7jsvwes
- SHA256 4581796e45219b853235681c0d02ab7613a94339f2f1f07ee3233206451b8da7
- MD5 fd664dde4d7f73ec0a0a8515f4bc5b3a
- SHA1 5df5bb19b9501fe5312850c6c8cbc7a902f3498d
- SHA512 67d633907a161bcfda6f5dc1822e1e99f6ce8820ae23bde203b65c20adaa3c3bc32487e4db69bb9bc7a23695c6e89cf4bd8d0da4e9e3d77189db67fe2f4c2127
- SSDEEP 98304:CJSidChdkkC8wzp3IfUXJQFpsVkbki26mvd82YwJiWqN:C68jd3I7FpsVkb5V2Yqiz
- TLSH T1C226023BF264A13EC46B073249B39250AA377E21691A8C1F03FC394DDF765612E3B656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_fd664dde4d7f73ec0a0a8515f4bc5b3a_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_fd664dde4d7f73ec0a0a8515f4bc5b3a_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_fd664dde4d7f73ec0a0a8515f4bc5b3a_cobalt-strike_darkgate_elex_gcleaner_icedid_njrat_swisyn_vidar
- Size 4.5MB
- SHA256 4581796e45219b853235681c0d02ab7613a94339f2f1f07ee3233206451b8da7
- MD5 fd664dde4d7f73ec0a0a8515f4bc5b3a
- SHA1 5df5bb19b9501fe5312850c6c8cbc7a902f3498d
- SHA512 67d633907a161bcfda6f5dc1822e1e99f6ce8820ae23bde203b65c20adaa3c3bc32487e4db69bb9bc7a23695c6e89cf4bd8d0da4e9e3d77189db67fe2f4c2127
- SSDEEP 98304:CJSidChdkkC8wzp3IfUXJQFpsVkbki26mvd82YwJiWqN:C68jd3I7FpsVkb5V2Yqiz
- TLSH T1C226023BF264A13EC46B073249B39250AA377E21691A8C1F03FC394DDF765612E3B656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory